CVE-2008-2828

EUVD-2008-2821
Stack-based buffer overflow in tmsnc allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an MSN packet with a UBX command containing a large UBX payload length field.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
Affected Products (NVD)
VendorProductVersion
tmsnctmsnc
*
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
tmsnc
dapper
ignored
feisty
ignored
gutsy
Fixed 0.3.2-1ubuntu0.7.10.1
released
hardy
Fixed 0.3.2-1ubuntu0.8.04.1
released
intrepid
dne
jaunty
dne
karmic
dne
Common Weakness Enumeration
References
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=487222
http://secunia.com/advisories/34235
http://security.gentoo.org/glsa/glsa-200903-26.xml
http://www.securityfocus.com/bid/29850
https://exchange.xforce.ibmcloud.com/vulnerabilities/43297
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=487222
http://secunia.com/advisories/34235
http://security.gentoo.org/glsa/glsa-200903-26.xml
http://www.securityfocus.com/bid/29850
https://exchange.xforce.ibmcloud.com/vulnerabilities/43297